Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier: z/JOSKga8ZqOitNTvrqRuKvT+9wPI7dgqZT4GkALlK4=
Subject key identifier: 98:C8:2C:EF:4D:9E:8F:D4:CB:88:79:22:BB:A8:D0:44:79:F3:FD:14
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial: 019E1ED9AE860CE94B05CF2D5BD3F0C4F83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number: 0660
Signing time: Wed 13 May 2026 01:00:42 +0000
Manifest this update: Wed 13 May 2026 01:00:42 +0000
Manifest next update: Thu 14 May 2026 01:00:42 +0000
Files and hashes: 1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: 0QzJsN5VzuBVQzfwN8wAS3vqHpASQLhX+MPxa+7e21w=)
3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:ae:86:0c:e9:4b:05:cf:2d:5b:d3:f0:c4:f8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Validity
Not Before: May 13 01:00:42 2026 GMT
Not After : May 14 01:00:42 2026 GMT
Subject: CN=98c82cef4d9e8fd4cb887922bba8d04479f3fd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:89:40:07:fa:7a:ef:42:e8:74:a5:db:20:92:
36:a2:e3:c4:8f:3a:f3:75:db:2d:35:76:f8:7f:34:
d3:51:9a:f5:ea:ff:b1:9d:9d:6f:b9:85:3e:ef:de:
45:96:f0:c3:83:3d:dc:01:c2:4c:e9:7e:fc:5f:7c:
27:08:40:9e:98:d7:50:7c:b0:76:06:b8:58:cb:3e:
d2:3d:d4:dc:80:be:20:e6:10:04:93:09:14:23:94:
da:d5:7e:a3:26:f4:1e:f6:fb:0e:a7:31:a6:46:26:
c3:fd:f1:6a:4f:e5:e7:13:44:4a:44:d0:b8:5a:17:
80:fe:e8:bf:b0:7f:51:9c:b4:a9:e2:05:87:62:f3:
5e:62:55:b4:04:79:be:2f:f7:f1:cb:84:70:4a:9f:
69:7c:0c:58:93:a8:0a:fe:5b:79:45:82:4b:5e:81:
bb:65:cd:a7:a9:6f:a7:8b:48:f1:44:a6:af:a7:61:
da:ee:83:49:35:78:a5:c7:4f:9c:8f:e7:18:97:a2:
ac:c1:07:da:de:69:fc:b9:55:54:89:e3:72:1f:fe:
51:2d:f9:4a:57:d2:fa:2d:e5:e9:0c:ff:2a:dc:aa:
a4:0c:f7:ec:0d:ba:7f:e6:e3:d6:27:f5:bf:14:3b:
6e:25:c1:9b:ed:7d:ff:d7:ee:6a:84:64:f3:c9:dd:
d4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:C8:2C:EF:4D:9E:8F:D4:CB:88:79:22:BB:A8:D0:44:79:F3:FD:14
X509v3 Authority Key Identifier:
keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:b8:9d:fa:1c:bd:ce:16:bf:3b:65:8f:86:c8:52:c5:0b:ac:
fc:92:06:3b:f7:7e:c8:37:4d:72:5f:d6:b7:1e:09:97:da:31:
43:60:c6:92:66:55:a9:a6:66:24:5f:b0:56:25:0e:7b:5e:54:
6f:9c:17:80:48:b9:ec:74:81:93:9f:e5:db:a3:56:39:63:34:
1b:3d:1f:c3:d4:19:2d:1f:23:79:e3:53:8c:b8:eb:12:82:a8:
61:f7:bc:c4:36:78:c2:cd:fe:58:86:1d:01:cc:f4:4f:34:37:
6b:42:b2:1b:69:3f:83:0f:3c:a6:6f:d4:ef:12:ad:37:56:ec:
65:92:a3:e0:83:a5:11:1b:04:7f:fe:59:d3:e2:4c:0f:28:18:
ef:cc:50:aa:d9:77:c9:64:4b:97:f7:e3:7a:6d:45:77:18:7e:
b8:1d:ea:2a:40:98:92:95:14:de:15:6d:3f:e8:57:2d:24:0e:
06:49:be:b8:7e:52:ea:6c:a4:32:c2:11:e2:6a:00:5d:cd:60:
90:d0:57:ef:8e:48:89:15:f5:34:1a:12:7e:28:f2:e1:60:53:
da:8d:f0:b7:c6:25:7e:d6:16:64:38:4d:e1:f3:3d:64:9e:fb:
5f:8b:85:76:a7:0b:1e:17:17:fe:81:08:cc:68:55:c6:54:5f:
4c:a4:7d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:50:59 2026 by rpki-client